Vulnerabilidades do DOS Co., Ltd. SS1 Cloud
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam DOS Co., Ltd. SS1 Cloud: 5 registro(s), com versões afetadas e correções.
CVE-2025-58072
Alta · 7.5
CWE-22 28/08/2025
Path Traversal em DOS Co., Ltd. SS1
Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier). If this vulnerability is exploited, arbitrary files may be viewed by a remote unauthenticated attacker.
CVE-2025-54819
Média · 6.5
CWE-22 28/08/2025
Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in...
Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier). If this vulnerability is exploited, legitimate files may be overwritten by a remote authenticated attacker.
CVE-2025-53970
Crítica · 9.8
CWE-434 28/08/2025
SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) allows a remote unauthenticated...
SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier) allows a remote unauthenticated attacker to upload arbitrary files and execute OS commands with SYSTEM privileges.
CVE-2025-53396
Alta · 7.0
CWE-732 28/08/2025
Incorrect permission assignment for critical resource issue exists in SS1 Ver.16.0.0.10 and...
Incorrect permission assignment for critical resource issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier), which may allow users who can log in to a client terminal to obtain root privileges.
CVE-2025-52460
Média · 5.3
CWE-552 28/08/2025
Files or directories accessible to external parties issue exists in SS1 Ver.16.0.0.10 and earlier...
Files or directories accessible to external parties issue exists in SS1 Ver.16.0.0.10 and earlier (Media version:16.0.0a and earlier). If exploited, uploaded files and SS1 configuration files may be accessed by a remote unauthenticated attacker.